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The concept of trust and/or trust management has received considerable attention in engineering research 
communities as trust is perceived as the basis for decision making in many contexts and the motivation for 
maintaining long-term relationships based on cooperation and collaboration. Even if substantial research 
effort has been dedicated to addressing trust-based mechanisms or trust metrics (or computation) in diverse 
contexts, prior work has not clearly solved the issue of how to model and quantify trust with sufficient 
detail and context-based adequateness. The issue of trust quantification has become more complicated as 
we have the need to derive trust from complex, composite networks that may involve four distinct layers of 
communication protocols, information exchange, social interactions, and cognitive motivations. In addition, 
the diverse application domains require different aspects of trust for decision making such as emotional, 
logical, and relational trust. This survey aims to outline the foundations of trust models for applications 
in these contexts in terms of the concept of trust, trust assessment, trust constructs, trust scales, trust 
properties, trust formulation, and applications of trust. We discuss how different components of trust can 
be mapped to different layers of a complex, composite network; applicability of trust metrics and models; 
research challenges; and future work directions. 
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1. INTRODUCTION 


Trust has been broadly studied in many different disciplines and used as the basis for 
decision making in diverse contexts. Although different disciplines define trust differ- 
ently, the problems they aim to solve have the common goals of accurate assessment of 
trust as a robust basis for decision making where inaccurate trust estimation can allow 
a trustor to place false trust in a trustee (i.e., mistrust), leading to a betrayal by the 
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trustee or losing opportunities with good collaborators. In particular, as perfect knowl- 
edge is not available in many problem domains, the critical decisions are often made 
with uncertain, incomplete, and conflicting information. This uncertainty exposes the 
decision maker to risk of loss from incorrect decisions due to possible misplaced trust 
in another entity. 

Yamamoto [1990] suggests that trust is a crucial component of social life. Individuals 
in societies continue to interact with each other as a direct result of their expectation 
of positive outcomes of such interactions [Yamamoto 1990]. These interactions result 
in relationships based on trust, in which individuals act in a way with the aim of main- 
taining future positive interactions, instead of acting out of self-interest [Gambetta 
1988]. That is, after cooperative behavior to maximize self-interest (i.e., utility) results 
in a trust relationship between two entities, it can also enhance their cooperation, 
leading to a virtuous cycle of mutual benefit based on the trust relationship. 

Past surveys on trust research are often limited to a particular research domain, 
such as trust metrics in data fusion [Blasch et al. 2014], trust management in mobile 
ad hoc networks (MANETs) [Cho et al. 2011], and trust and reputation systems in 
online services [Jøsang et al. 2007]. Different from the prior work, this survey brings 
together the core aspects of trust modeling from different domains. In addition, we 
introduce the concept of composite trust, which can be derived from the mixture and/or 
interplay of the trust characteristics from different domains. We pose the problem of 
trust modeling in a complex, composite network setting to build multilayered trust 
dimensions as follows: 


—Communication trust from communication networks such as quality of service (e.g., 
service response time, packet drop rates) 

—TInformation trust from information networks (e.g., information credibility, veracity, 
integrity) 

—Social trust from interactions/networks (e.g., a source’s reliability) 

—Cognitive trust from cognitive process (e.g., cognitive information processing 
capability) 


For example, when Alice receives information from Bob, they often use communica- 
tion media (e.g., email, phone, text, social network services or media). Depending on 
the quality of service (QoS) received by the interacting entity, Alice’s trust toward the 
information and/or source of the information may be adjusted, such as high delay of 
a message delivered. In addition, the received information can be analyzed based on 
many different criteria to capture quality of information (Qol) that may include cor- 
rectness, completeness, credibility, and/or relevance. If Alice knows Bob in her social 
network, Alice can also infer the trust of the information based on Bob’s reputation 
(e.g., influence, centrality), social ties, and/or similarity in the social network. When Al- 
ice needs to make a certain decision based on Bob’s advice, how to filter Bob’s advice on 
Alice’s side is also dependent upon Alice’s cognitive constructs such as tendency, com- 
petence, and/or feeling as well as other situational factors such as risk and uncertainty 
inherent in the decision. 

This article aims to give a good starting point for trust researchers by providing 
efficient and relevant background knowledge on how to model trust in a given domain. 
This article deals with the following topics: 


—What is trust? How has trust been defined in different disciplines? What are the key 
factors that affect trust assessment of an entity? (Section 2) 

—How is trust measured in the continuum from distrust to trust? How does one put 
trust on a scale (e.g., binary, discrete, continuous)? (Section 3) 
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Discipline Meaning of Trust Source 
Sociology Subjective probability that another party will perform an Gambetta [1988] 
action that will not hurt my interest under uncertainty and 
ignorance 
Philosophy Risky action deriving from personal, moral relationships Lahno [1999] 
between two entities 
Economics Expectation upon a risky action under uncertainty and James [2002] 
ignorance based on the calculated incentives for the action 
Psychology Cognitive learning process obtained from social experiences Rotter [1980] 
based on the consequences of trusting behaviors 
Organizational Willingness to take risk and being vulnerable to the Mayer et al. 
Management relationship based on ability, integrity, and benevolence [1995] 
International Belief that the other party is trustworthy with the Kydd [2005] 
Relations willingness to reciprocate cooperation 
Automation Attitude that one agent will achieve another agent’s goalina | Lee et al. [2006] 
situation where imperfect knowledge is given with 
uncertainty and vulnerability 
Computing & Estimated subjective probability that an entity exhibits Cho et al. [2011] 
Networking reliable behavior for particular operation(s) under a situation 
with potential risks 





—What are the constructs of trust? How can they be formulated in a certain dimension? 
What constructs can be mapped to measure the so-called composite trust derived 
from a complex, composite network? (Section 4) 

—What are the properties of trust and how are they modeled? (Section 5) 

—What are the applications of trust in computing and engineering fields? What are 
the challenges and suggestions in modeling trust? (Section 6) 

—Concluding remarks (Section 7) 


2. CONCEPT AND ANALYSIS OF TRUST 
2.1. Multidisciplinary Definitions of Trust 


The dictionary definition of trust is “assured reliance on the character, ability, strength, 
or truth of someone or something” [Merriam and Webster Dictionary 2015]. In essence, 
trust is a relationship in which an entity, often called the trustor, relies on someone or 
something, called the trustee, based on a given criterion. As trust is a multidisciplinary 
concept, the term has been used in different disciplines to model different types of rela- 
tionships: trust between individuals in social or e-commerce settings, trust between a 
person and an intelligent agent in automation, and trust between systems in commu- 
nication networks [Cho et al. 2011]. Before we give a common definition of trust that 
encompasses these concepts, we briefly survey the definitions of trust in different fields 
and across disciplines. We then use these definitions to arrive at a multidisciplinary 
definition of trust. 

Social sciences often study trust between individuals in social settings. However, 
some definitions of trust look at trust in other entities like organizations and coun- 
tries. In social settings, individuals have expectations of behavior from each other. In 
a classical definition from Sociology, Gambetta [1988] defines trust as the trustor’s 
subjective probability about whether the trustee (or trustees) will perform a particular 
action that benefits the trustor. The probability is assessed before the trustee takes 
an action and in conditions of uncertainty regarding the trustee. In this model, trust 
exists if the probability exceeds a threshold. He clarifies the relationship between trust 
and cooperation in that trust is one possible result of cooperation, not the precondition 


ACM Computing Surveys, Vol. 48, No. 2, Article 28, Publication date: October 2015. 


28:4 J.-H. Cho et al. 


of cooperation. Agents can cooperate due to self-interest or obligation, not trust. If two 
agents trust each other, they would be more willing to cooperate. 

Despite the modeling of trust as a subjective probability, it is often treated as the 
trustor’s belief about the trustee. A great deal of research concentrates on the nature 
of this belief from the perspective of the trustor. 

In Philosophy, for example, trust is a personal, internal phenomenon that helps 
maintain moral relationships between individuals. In particular, according to Lahno 
[1999], betrayal of trust is a clear violation of moral behavior, leading to distrust. 

In Economics, trust is commonly studied from the perspective of a trustor’s motiva- 
tions for cooperation in risky situations. The source of the risk is that the trustee may 
choose not to cooperate and cause a loss of utility for the trustor. The trustor’s decision 
to trust an individual is based on a rational decision to maximize its own interest by 
choosing the best compromise between risk and possible utility from cooperation. This 
model of trust has been debated by psychologists and behavioral economists who have 
shown many examples of irrational behavior by individuals in the strict utility sense. 

In Psychology, Rotter [1980] describes trust as a cognitive construct an individual 
learns from social experience such as positive or negative consequences of trusting 
behavior. He concludes that if a person has had negative experiences by trusting more 
in the past, the person is not likely to trust in the future, or vice versa. Propensity 
to trust is a well-accepted construct, showing differences in the level of trust between 
individuals in the same situation. 

It is clear from these studies that a human trustor’s individual characteristics, mo- 
tivation, and social and cultural background will impact how much he or she will trust 
another agent. However, even individuals with the same propensity to trust will differ 
in their trust levels depending on the given situation. In particular, trust beliefs are 
highly impacted by who or what the trustee is. Other work concentrates on modeling 
the trustworthiness of the trustee. 

In International Relations, Kydd [2005] describes trust as the belief that the other 
party is trustworthy with the willingness to reciprocate cooperation. On the other hand, 
mistrust is to believe that the other party is untrustworthy in order to exploit one’s 
cooperation. Trust and mistrust between nations have been discussed as important 
issues because they can lead to peace or war. 

In Organizational Management, Mayer et al. [1995] define trust as the willingness 
of the trustor to take risk and be vulnerable based on the ability, integrity, and benev- 
olence of the trustee. The definition of trust based on these three dimensions of the 
trustee has been extensively used in different areas, especially in fields like automation 
and other fields of computing and engineering in modeling trust of a human toward a 
machine’s automated operations. 

In different computing fields, various definitions of trust exist. When the trustor is 
a computational agent, the individual characteristics of the trustor are not relevant to 
the model. In these cases, models concentrate on understanding the trustworthiness 
of the trustee based on past behavior. 

In Automation, Lee and See [2006] see trust as the attitude that one agent will 
achieve another agent’s goal in a situation where imperfect knowledge is given with 
uncertainty and vulnerability. The trustee is often an automation system, while the 
trustor can be either a person or another computational agent. The main goal in au- 
tomation, called trust calibration, is to assess whether the trustor’s trust beliefs reflect 
the actual ability of the automation to achieve a task. The reliability aspect of the trust 
belief models whether the system is operating within design parameters or not. 

In Computing and Networking, the concept of trust is used in many different 
fields ranging from artificial intelligence to human-machine interaction to network- 
ing (e.g., telecommunication, social network analysis, communication networks, and 
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cyber/network security) [Cho et al. 2011; Adalı 2013]. An agent’s trust is a subjective 
belief about whether another entity will exhibit behavior reliably in a particular con- 
text with potential risks. The agent can make a decision based on learning from past 
experience to maximize its interest (or utility) and/or minimize risk [Cho et al. 2011; 
Li et al. 2008]. 

Across disciplines, we summarize the concept of trust based on the common themes 
as follows. 


Trust is the willingness of the trustor (evaluator) to take risk based on a subjective 
belief that a trustee (evaluatee) will exhibit reliable behavior to maximize the trustor’s 
interest under uncertainty (e.g., ambiguity due to conflicting evidence and/or ignorance 
caused by complete lack of evidence) of a given situation based on the cognitive assess- 
ment of past experience with the trustee. 


2.2. Analysis of Trust Assessment 


Based on the previous discussion on the multidimensional concept of trust, we incor- 
porate various concepts of trust to describe how an entity assesses another entity’s 
trust and how the trust evolves over time. Figure 1 explains each term and step used 
to describe how “Trustor i assesses Trustee j’s trust if j can perform Task A.” Here we 
discuss them in detail as follows. 

Trustor i is a cognitive entity that has the learning ability to estimate trust of 
a trustee to maximize its interest (or utility) from the relationship with the trustee. 
Game-theoretic approaches have been used to model utility functions of an agent in 
various domains [Chin 2009]. 

Trustee j is an entity that can cause some impact on a trustor’s interest by the 
outcome of its behavior [Castelfranchi and Falcone 2010]. 

Trust Assessment is the process that trustor i employs to assess trust for trustee 
J, incorporating different considerations on both individual and relational levels from 
the mood of the trustor to the reliability of the trustee as well as the influence of the 
trustee in a social network. We discuss these diverse considerations in Section 4 and 
summarize them in Figure 1. 

Risk Assessment is a critical phase for objective assessment of trust. This can 
be conducted based on three dimensions: uncertainty/ambiguity, vulnerability, and 
impact. Uncertainty comes from lack of evidence to estimate trust, while ambiguity 
derives from conflicts of evidence from multiple sources toward a same proposition. 
The amount of relevant evidence can lead i to make a decision on whether to trust j. 
Vulnerability is how easily trustee j can betray and exploit 7’s trust in j in order to 
pursue j’s goal that may hurt 7’s interest. Impact is the measure of consequence when 
i’s decision fails by either being betrayed by j or losing opportunities to achieve 7’s goal. 

Importance of Task Ato Trustor i is also a significant factor for i to decide whether 
to trust j. If j behaves as i expects and trusting j gives higher benefit to i than not 
trusting j, i is more likely to take risk in trusting j. According to Gambetta [1988], 
cooperation is not the result of trust, while trust is the result of the cooperation-based 
mutual benefit of helping each other. However, the mutual trust generated by the 
initial cooperation can enhance continuous cooperation in repeated games. We discuss 
cooperation in detail as a factor that affects trust relationships in Section 2.3. 

Through the risk assessment and the importance of A, i can estimate the utility of 
either decision and can choose one that gives a higher utility. Note that the utility is 
computed based on the gain and loss of each decision. When the utilities of the two 
decisions are equal, then i keeps searching for more evidence to make a decision. 

Outcome is the result after the decision is made. Depending on whether the de- 
cision turns out to be right or wrong, trust is adjusted accordingly. This is called 
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Trustworthiness based on Trustworthiness based on 
observed outcome observed outcome 


i’s Trust Assessment in j 


Individual Trust Assessment Relational Trust Assessment 





Emotional Trust: expectation, Similarity (homophily, like- 
willingness, attitude, propensity mindedness), centrality (or influence, 
Logical Trust: belief, experience, betweenness), importance 
rationality, uncertainty, reliability 


i’s Risk Assessment in Trusting j: 

e Uncertainty / ambiguity: Is the amount of relevant information 
sufficient to make a decision? Does the collected information 
show consensus, not conflicting? 

Vulnerability: how easily can j’s behavior betray i’s 
expectation? 

Impact upon failure: what is the consequence if trusting 
decision fails? 


Task A’s Importance to i: 
e What is gain (G) if decision results in positive outcome? 
e What is net loss (L) if decision results in negative outcome? 
e Utility (U) =G-L 


TU (Trusting) = NTU (Not Trusting) 


g 3 


Outcome of Trusting Decision Outcome of Not Trusting Decision 
Success: Reinforce prior belief; increase trust Success: Reinforce prior belief; decrease trust 
Failure: Adjust prior belief to decrease trust Failure: Adjust prior belief to increase trust 


Fig. 1. Analysis of the trust assessment process. 


trustworthiness, which represents objective trust based on observed outcome, while 
overall trust can be formed based on the combination of subjective trust and objective 
trust. The trustworthiness is the trust validated through the actual evidence. The out- 
come is fed back to the trust assessment cycle in repeated situations. That is, validated 
trust can reinforce the prior belief, while betrayed trust can fix the prior belief and 
update the current belief based on the new evidence. In this sense, the mental process 
of trust assessment is recursive in nature because a prior belief generates an outcome 
that is fed back as the input to update trust. 

Romano’s classification on the concept of trust [2003] is well aligned with the process 
of trust assessment described in Figure 1. Romano [2003] categorizes the concept of 
trust in terms of phenomenon, sentiment, and judgment. These three criteria match 
the stages of trust assessment. First, phenomenon-based trust explains how a trustor 
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forms trust in a trustee based on the perceived social and functional phenomenon 
(e.g., observed behavior) by his or her subjective attitude. Second, sentiment-based 
trust addresses utility analysis related to why the trustor needs to trust a trustee or 
not. This explains how the trustor is motivated to trust the trustee, what would be a 
consequence if the decision fails, and what the degree of calibrated risk is associated 
with uncertainty. This state is in line with risk assessment and a task’s importance 
associated with a trustor’s interest explained in Figure 1. Lastly, judgment-based trust 
is associated with how trust is measured and updated. This is well matched with the 
state of reinforcing and updating prior belief based on the outcome of the prior decision, 
which is new evidence in a cycle of trust assessment. 


2.3. Factors Affecting Trust 


How an entity assesses another entity’s trust can be affected by other conditions, which 
include internal and/or external properties such as an individual’s psychological states 
and social/political relationships of the two entities. Now we look at concepts that can be 
observed in relationships between entities and how they can affect trust relationships. 

Risk critically affects trust relationships. Trust is the willingness to take risk under 
uncertainty [Luhmann 1979]. Risk may be estimated based on the degree of harm 
multiplied by its likelihood. Castelfranchi and Falcone [2010] distinguish objective 
risk from subjective risk. Objective risk is perceived by external ideal observer‘(s), 
while subjective risk is perceived by an individual entity. Luhmann [1979] defines risk 
differently from a danger. The danger may exist regardless of the decisions made by an 
entity, while risk is triggered based on the decision made by the entity. Deciding to use 
trust for decision making implies that a trustor is willing to accept risk [Luhmann 1979; 
Boon and Holmes 1991]. Jésang and Presti [2004] and Solhaug et al. [2007] discuss 
that trust is not necessarily proportional to the reverse of risk because risk may exist 
even under a situation with high trust. By applying the relationship between trust and 
risk, the balance between trust and risk can be investigated for optimizing gains by 
trust decisions. 

Faith is a belief based on nonrational grounds [Castelfranchi and Falcone 2010]. 
Strict faith does not allow doubt by searching evidence and goes against counterev- 
idence. If trust is evidence based, faith is contrary to trust. However, faith may be 
triggered by evidence, signs, or experience. But even if faith may be triggered by some 
evidence, after it is formed, it is less likely to be changed. 

Fear is “perceived risk” that is unbearable or unmanageable [Lazarus et al. 1970]. 
Fear represents extreme lack of trust as part of distrust and can increase if a trustor 
is exposed or unprotected by the consequence of the failure of its trust relationship. 

Feeling is something that entity i “feels” about entity j like confidence, not judg- 
ment [Castelfranchi 2009]. Feeling-based trust, in contrast to reason-based trust (e.g., 
evidence-based evaluation), can be formed based on explicit experiences, dispositions, 
intuition, knowledge, and/or implicit learning. 

Valence implies a positive or negative as the key factor affecting trust. Dunn and 
Schweitzer [2005] show that positive valence (e.g., happiness, hope) increases trust, 
while negative valence (e.g., fear, guilty) decreases trust. 

Faith, fear, feeling, and valance are the components related to an individual’s dif- 
ference in terms of a perspective to perceive things and/or situations that affect trust 
assessment. Accordingly, they significantly affect decision making even without any 
evidence. 

Power given unequally between two entities can put their trust relationship in 
danger [Farrell 2009] because trust cannot be maintained in a situation of extreme 
disparities of power. But trust may exist in relationships where disparities of power 
between two entities exist but are less pronounced. Farrell distinguishes when power 
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over one entity is derived out of trust from when power and trust are not mutually 
exclusive (e.g., complying to a given authority, not because of trusting). 

Delegation occurs when an entity wants to exploit the actions of other entities for 
achieving its goal. The formal definition can be “entity i delegates entity j to perform 
action « for achieving goal o” [Castelfranchi 2009]. The trust of entity i in entity j is 
not the precondition of delegation of task g to entity j. Dependence-based delegation 
occurs when action a of entity j is a necessary condition to achieve goal ọ regardless 
of the fact that entity i trusts entity j. On the other hand, preference-based delegation 
means that entity i believes that goal y can be more likely to be achieved by action a 
based on entity 7’s preference [Castelfranchi 2009]. Norman and Reed [2010] discuss 
how responsibility can be transferred in the process of delegation. 

Control is an action that aims at (1) ensuring successful achievement of a certain 
task by monitoring (or providing feedback) and (2) intervening in the middle of per- 
forming a task not to degrade performance [Castelfranchi and Falcone 2000]. Control 
often kills trust such that entity i tries to control entity j because entity i does not 
trust entity j. However, when control is properly used, it can be complementary to 
trust, resulting in increased trust between two entities while mitigating risk. 

Credit can be given from uncertainty in a situation where a trust decision should be 
made, depending on a trustor’s attitude or prior trust toward a trustee. Trust is more 
than a belief based on evidence that gives a certain level of confidence. In particular, 
when uncertainty exists, trust can give “credit” for the uncertainty. For example, when 
50% of trust can be explained based on evidence, it does not mean the other 50% 
shows distrust, but it would just represent lack of evidence, which can be given as 
credit [Castelfranchi and Falcone 2000; Jgsang et al. 2006]. 

Cooperation has been thought of as the result of trust relationships between en- 
tities. However, some researchers discuss that the foundation of cooperation is not 
trust but the durability of the relationship based on possibilities for mutual rewards 
[Gambetta 1988]. Axelrod [1981] explains that cooperation emerges given an indefinite 
number of interactions. An individual entity cannot prosper without being cooperative 
with other entities. Depending on context, there may be a situation in which trust 
does not play a key role in triggering cooperation. However, as cooperative interac- 
tions evolve, trust can emerge and be fed back to trigger other cooperative behavior for 
reciprocation. 

Altruism refers to an act that benefits another entity, which is not closely related 
(e.g., not relatives), while being obviously harmful to the entity performing the altruistic 
behavior [Trivers 1971]. Trivers [1971] formalizes an altruistic act as the higher net 
benefit given to a recipient than one to a performer of the act. In this sense, trust is 
explained as one of the factors to regulate the altruistic system where trust-induced 
reciprocation can circulate or foster altruistic behavior or vice versa. 

Reciprocation is commonly observed in societies of animals or insects such as 
bats [Harcourt 1991], chimpanzees, and cetaceans [Trivers 1985]. If one acts in favor of 
another, the favor is expected to be returned now or some time later. Reciprocation tends 
to benefit the reciprocator in the long run. Reciprocators will be more likely to have 
the benefits of their cooperative behaviors to others, distinguished from cooperative 
behaviors based on purely altruistic motives. Reciprocation contributes to reasoning 
trust. Computing the net benefit of reciprocation may need to consider aspects of 
memory in terms of the time for the reciprocation to be returned. 

Adoption is an action to accept or choose something or someone to achieve a cer- 
tain goal. According to Hardin [2002], a self-interested (i.e., “self-driven” and “self- 
motivated,” but distinguished from being “selfish”) agent can adopt another entity’s 
goal to achieve its goal. For example, if we order to ship an item online by paying 
money, we trust the item will arrive within several days. That is, the trustee acts as 
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the trustor expected but the trustee acts that way for his or her own benefit. However, 
the trustor’s decision to adopt the trustee’s goal is based on its trust in the trustee 
[Falcone and Castelfranchi 2001]. 

Social or Relational Capital can be viewed as trust of an individual as a strate- 
gic resource, such as how to be selected from other potential partners to establish 
cooperation / collaboration via accumulated trust [Castelfranchi and Falcone 1998al. 
Most trust research examines trust evaluation in terms of a trustor’s perspective, such 
as how to select the right collaborators to complete his or her goals. Burt [2000] and 
Coleman [1988] view social capital as the benefits that individuals or groups have 
because of their location (or status) in social structure. Bourdieu [1983] explains that 
social capital is obtained through all possible resources from relationships in social net- 
works an entity (person) is associated with. Putnam [2000] indicates that social capital 
can be trust, norms, and networks of a social organization. Relational capital is a cap- 
ital for individuals. As the perspective of a trustee, relational capital is the basis of the 
social capital that can give social power in a network [Castelfranchi and Falcone 1998bl. 

Norms, Regulations, Laws, and Contract are often placed for a trustor to be 
protected from possible risk when there is no trust between the parties [Castelfranchi 
1995]. Some types of regularity and normality are introduced for a trustor to be pro- 
tected when a trustee violates the contract. However, the key issue is not trust between 
two parties, but how to enforce the contract [Castelfranchi 1995]. Trust is needed to 
achieve the goal for the two parties to make a contract. However, there should be more 
trust of the trustee in the authority that enforces the contract, which may generate 
fear upon breaking the contract and lead the trustee to follow the contract. A different 
type of trust, called institutional trust, is needed in this context [Castelfranchi 1995]. 

The terminologies discussed here can be examined in terms of how they affect the 
relationships between two entities and how trust is affected by their dynamics. Table II 
summarizes the definitions of the these concepts [Merriam and Webster Dictionary 
2015] and correspondingly their relationships with trust based on our discussion in 
this section. 





3. MEASUREMENT OF TRUST 
3.1. Continuum of Trust 


Different levels of assessed trust are often called by different terms representing low 
trust, misdiagnosed trust, or a mixture of the two. In this section, we give clear distinc- 
tions of the concept of trust from other associated concepts including distrust, untrust, 
undistrust, mistrust, and misdistrust. In addition, we demonstrate the continuum of 
trust in which each term can be used to indicate a certain range of the trust contin- 
uum. Now we start to look into what each term means and how it is formulated in the 
literature. 

Trust is a belief that does not necessarily require observed behavior in the past, that 
is distinct from trustworthiness, which is a verified objective of trust through observed 
evidence [Solhaug et al. 2007]. Thus, trust includes both subjective and objective trust 
(i.e., trustworthiness). Trust can be simply notated as [Marsh 1994]. 


TG j, æ). (1) 


This notation reads as “i trusts j in a situation a.” Marsh [1994] defines trust as a real 
number scaled in [—1, 1], where 0 indicates complete uncertainty or ignorance. 

Specifying the aspects of motivational actions of trusting behavior in a situation, 
Castelfranchi [2009] defines general trust, called the core trust, by 


CoreTrust(i, j, p) = V CoreTrust(i, j, a, 9). (2) 
acA 
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Table II. Concepts Affecting Trust Relationships 
























































Concept Definition Relationship with Trust 
Risk Possibility that something bad or Trust is the degree of willingness to take risk 
unpleasant (such as an injury or a 
loss) will happen 
Faith Strong belief or trust in someone Faith can be triggered by trust and is less 
or something likely to be changed when it is formed 
Fear Being afraid or worried of Fear represents the extreme lack of trust 
something or someone 
Feeling An emotional state or reaction Feeling affects forming trust based on 
individuals’ characteristics in knowledge, 
experiences, intuition, and dispositions 
Valence Degree of attractiveness an Positive valence increases trust, and vice versa 
individual, activity, or thing 
possesses as a behavioral goal 
Power Ability or right to control people or | Unequal power relationships can endanger 
things trust 
Delegation Act of giving control, authority, a Trust may trigger delegation based on 
job, or a duty to another person preference 
Control Directing the behavior of (a person | Control may kill trust; but when it is properly 
or animal); causing (a person or used, it can be complementary to trust in 
animal) to do what you want mitigating risk 
Credit Provision of money, goods, or Trust can give credit for uncertainty derived 
services with the expectation of from lack of evidence 
future payment 
Cooperation A situation in which people work Repeated cooperative interactions may trigger 
together to do something; the trust, which can be fed back to cooperative 
actions of someone who is being behaviors 
helpful by doing what is wanted or 
asked for 
Altruism Unselfish regard for or devotion to | Trust can regulate and foster altruistic 
the welfare of others behavior 
Reciprocation | A mutual exchange Reciprocation contributes to reasoning trust, 
which fosters cooperative behaviors 
Adoption Act or process of giving official A trustor’s decision to adopt a trustee lies in 
acceptance or approval to his or her trust in the trustor 
something 
Social Capital | Benefits that individuals or groups | Trust relationships are the capital to gain 
have because of their location (or social power 
status) in social structure 
Relational A capital that can gain from all Trust relationships are the capital to gain 
Capital relationships in an individual relational power 
Contract A legal agreement or document A contract based on norms, regulations, or 
between people, companies, etc. laws is placed to protect trust relationships 
from possible risk due to lack of trust 














Here, entity i trusts entity j to achieve goal ọ by action a if and only if there exists 
some action a where A is the set of actions through which entity i can act toward 
entity j. 

Compared to the Marsh [1994] definition of trust in Equation (1), the core trust is 
a generalized formulation of trust by specifying internal properties (i.e., goal ọ) and 
external properties (i.e., actions as) of a trustor i that can act toward a trustee j. 

Distrust is not simply the complement of trust [Pereitra 2009]. Trust and distrust 
may not be derived from the same information but can coexist without being comple- 
mentary [Marsh and Dibben 2005; Luhmann 1990; Pereitra 2009]. For example, i may 
not trust j due to lack of information, but this does not mean i distrusts j [Pereitra 
2009]. When i believes that j has negative intentions toward i, this is distrust. Marsh 
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distrust undistrust untrust trust 
' ' 
ee | 
[i ' 
Limit of forgivability 0 Cooperation threshold 


ignorance 
Fig. 2. Trust continuum: trust, untrust, undistrust, and distrust. 


and Briggs [2009] formulate distrust by 
T (i, j, a) < 0 => Distrust, j, æ). (3) 


T (i, j, a) < 0 indicates that trust is below the ignorance value 0, where the higher the 
value is, the higher the trust that exists between i and j in situation a. The previous 
equation reads as “i believes that j will be actively against 7’s best interest in situation 
a.” Castelfranchi [2009] also defines distrust by 


Distrust(i, j, p) = \/ Distrust(i, j, æ, p). (4) 
acA 


Similar to the core trust defined in Equation (2), this distrust formulation provides 
internal and external properties of a trustor i that can act toward a trustee j. The 
previous equation reads as entity i distrusts entity j to ensure goal ọ by doing all 
actions as. 

Untrust is defined as the state in which a trustee cannot reach the cooperation 
threshold in terms of its capability. For example, i does not distrust j, but i cannot 
trust j since j does not have the capability to perform task a or i does not have 
sufficient evidence to trust j [Marsh and Briggs 2009]. Untrust can be represented as 


Ti, j,a)>O0 A Thi, j,a) < Thorton j w) => Untrust(i, j, a). (5) 


Cofta [2007] calls this concept of untrust “mixed trust.” Different from untrust or 
distrust, usually ignorance or ambivalence indicates T (i, j, œ) = 0. 

Undistrust means the lack of trust [Griffiths 2006] indicating when a trustor cannot 
sufficiently make a decision for whether he or she distrusts a trustee. Castelfranchi 
[2009] defines a similar concept, called “lack of trust,” as 


LackTrust(i, j, o) => \/ LackTrusti, j, a, p). (6) 
acA 


This means that “entity i lacks in trust in entity j to ensure goal g by performing 
all actions as.” Although the lack of trust does not necessarily mean distrust, distrust 
may mean lack of trust. Marsh and Briggs [2009] introduce a threshold to distinguish 
undistrust from distrust using the concept of forgiveness. We similarly formulate the 
limit of forgiveness as the distrust threshold by 


Thlorsivenessi iw) < T(i, j,a) < 0 => Undistrustii, j, œ). (7) 


Marsh and Briggs [2009] demonstrate the continuum of trust, untrust, undistrust, 
and distrust. Figure 2 shows the thresholds distinguishing undistrust from distrust 
and untrust from trust with a “limit of forgivability” and “cooperation threshold,” 
respectively [Marsh and Briggs 2009]. 

The concept of forgiveness is introduced through the mechanisms of redemption, 
recovery, or repairing in a system because selfish or malicious entities exhibit desirable 
behavior over time to regain their reputation or trust in order not to be isolated from 
a network [Cho et al. 2009; Wang and Wu 2007]. 
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Table Ill. Distinctions of Trust, Distrust, Untrust, Undistrust, Mistrust, and Misdistrust 




















Trustor’s Belief in a Trustee Trust | Distrust | Untrust | Undistrust | Mistrust | Misdistrust 
Capability to perform task X Yes Yes/No No Yes/No Yes No 
Negative intention No Yes No Yes/No No Yes 
Cooperation threshold Above Below Below Below Above Below 
Forgivability threshold Above Below Below Above Above Below 


























Mistrust derives from misinformation, often called misplaced trust, where a trustee 
does not have the intention to betray a trustor [Marsh and Briggs 2009]. Castelfranchi 
[Castelfranchi 2009] defines “mistrust” by 


Mistrust(i, j, 9) ==> \/ MistrustG, j, a, o). (8) 
acA 


This means that “entity i mistrusts entity j to ensure —ọ (ọ is not going to happen) 
by performing a.” Mistrust implies distrust, but not vice versa. Type I error refers to 
false negatives, implying mistrust in the previous equation. 

Misdistrust is defined as distrusting or ignoring an entity (or information) that 
is trustworthy [McGuinness and Leggatt 2006]. This is often categorized as Type II 
error, such as false positives in detection/observation. A trustor mistakenly diagnoses 
a trustee as untrustworthy. 

Table III summarizes the previous five concepts and their unique characteristics 
based on the belief of a trustor in a trustee. In particular, mistrust and misdistrust are 
related to the accuracy of trust assessment or estimation where they mean misplacing 
trust or distrust on a trustee where the ground truth is the opposite, trusting for a 
distrusted entity and distrusting for a trusted entity. 

The decision for whether an entity is trusted or not is often treated as a binary 
decision. When trust is evaluated in either discrete or continuous scale with different 
ranges of lower and upper bounds, the binary decision of trust can be made by using the 
trust threshold that can determine the trustworthiness of an entity, which is similar to 
the threshold of cooperation shown in Figure 2. Now we discuss how trust is measured 
in different scales in the literature. 


3.2. Scaling Trust 


The concept of trust is subjective in nature. Although many researchers have proposed 
different methods of scaling trust, there has been no standard of scaling trust so far. 
In this section, we survey how trust is measured with a different scaling manner in 
the literature and discuss how they can be explained on the continuum of trust and 
distrust. 

Different scales of trust include binary, discrete, nominal scale, and continuous val- 
ues. Table III gives the scales of trust measures found in the literature [Marsh 1994]. 
Noticeably, a binary scale to indicate trust level loses resolution, but it is simple and 
efficient to determine whether an entity is trusted or not. Dealing with trust as a 
number (either discrete or continuous) gives more flexibility for normalization or spot- 
ting outliers. Binary fashion of trust decision can be expanded to a situation in which 
an entity is treated as trusted when it has the trust level above a certain threshold, 
similar to the cooperation threshold shown in Figure 2. The trust threshold can be 
application dependent and can filter untrusted or distrusted entities out of a system 
based on system requirements. 

An entity uses different scales in evaluating its trust based on their judgments. 
The entity can have a favorable (positive) or unfavorable (negative) attitude toward 
another entity, taking a symmetric direction from complete trust to complete distrust. 
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Table IV. Various Scales of Trust Measurement 



















































































Normal CD | VHD | HD | HMD | LMD | LD LT LMT | HMT | HT | VHT | CT 
Binary 0 a 
Discrete 6 5 4 3 2 1 1 2 3 4 5 6 
Continuous | —1 0 1 
Ignorance 
CD Complete Distrust CT Complete Trust 
VHD Very High Distrust VHT Very High Trust 
HD High Distrust HT High Trust 
HMD High Medium Distrust HMT High Medium Trust 
LMD Low Medium Distrust LMT Low Medium Trust 
LD Low Distrust LT Low Trust 
= very moderately slightly slightly moderately very + 
unfavorable unfavorable unfavorable 0 favorable favorable favorable 





Distrust Ambivalence Trust 


(Strength: H: High; M: Moderate; L: Low) 


Fig. 3. Scaling trust and distrust on the continuum [Romano 2003]. 


When the entity decides the direction of trust, it can estimate the incremental degree 
of trust in the range of slightly - moderately - very. After that, the entity may have the 
perception to ensure the strength of trust, high - moderate - low. Figure 3 describes the 
continuum of trust and distrust. This is commonly used as an indicator of confidence in 
the literature. Now let us look into how various constructs of trust have been formulated 
in the existing work. 


4. CONSTRUCTS OF TRUST 


As trust is subjective in nature and context dependent, various dimensions of trust 
have been considered in different contexts with different purposes. Although other 
classifications may be possible, we view the concept of trust that can derive from 
individual and relational characteristics. Hence, we classify trust in two attributes: 
individual trust versus relational trust. 

Individual trust attributes involve any trust dimensions that can be mainly derived 
from an individual’s own characteristics. Relational trust attributes refer to the di- 
mensions of trust that can emerge from the relationships with other entities (e.g., by 
comparing itself to others). The individual trust attributes can be classified in a twofold 
manner: logical trust and emotional trust. Logical trust indicates reasoning trust based 
on a logical cognition process of evidence or observations by an entity. On the other 
hand, emotional trust involves a reasoning process of trust using an individual’s emo- 
tional sense such as feeling and propensity. Figure 4 summarizes the classification of 
constructs of trust in terms of individual and relational trust. And then individual trust 
has two aspects of attributes, such as logical trust and emotional trust. We discuss each 
construct of trust following the structure of the concepts demonstrated in Figure 4. 

Based on our discussions of trust attributes in Sections 4.1 and 4.2, we will discuss 
how each trust attribute can be found in a different layer of a complex, composite 
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ia: Trust Constructs | 


Individual Trust Attributes Relational Trust Attributes 


| | Similarity (or homophily, 


| Logical Trust Emotional Trust (Ramincscnersl, 
centrality (or influence, 





betweenness), importance 





Belief, confidence, experience, Expectation, hope, fear, 
frequency, certainty, competence, frustration, disappointment, 
honesty (or integrity), recency, relief, disposition, regret 
stability, relevance, credibility, 
completeness, cooperation, 
rationality, reliability, 
dependability, availability 











Fig. 4. Classification of factors affecting trust. 


network in Section 4.3 and propose the concept of composite trust consisting of com- 
munication trust, information trust, social trust, and cognitive trust. 


4.1. Individual Trust Attributes 


4.1.1. Logical Trust. In this section, we discuss the components impacting trust of an 
entity that can be logically derivable based on observations or evidence. 

Belief has been used as the root to estimate trust toward an entity for decision 
making. Many belief theories have been proposed since the 1970s, including Bayesian 
Inference [Fienberg 2006], Dempster-Shafer Theory [Shafer 1976], Transferrable Belief 
Model [Smets and Kennes 1994], Fuzzy Logic [Zadeh 1965], Subjective Logic [Jøsang 
1999, 2001], and Dezert-Smarandache Theory (DSmT) [Dezert and Smarandache 
2004]. Since each theory is very well known and contains a large volume of contents, 
interested readers can refer to Shafer [1976], Smets and Kennes [1994], Zadeh [1965], 
Jgsang [1999, 2001], and Dezert and Smarandache [2004] for details. Here we discuss 
how each theory has been used to propose trust models or schemes in computing and 
engineering domains. 

Bayesian inference has been a popular technique to estimate trust [Zouridaki et al. 
2005], where the beta distribution [Gillies 2000] is commonly applied. Given binary 
evidence such as “positive evidence a” and “negative evidence b” where a random 
variabler is in [0, 1] and a, b is larger than 1, the pdf of the beta distribution follows 


rel p r)jo-l 


beta(r; a, b) = — 
Jfa raa — r)-idr 


, where0<r<1. (9) 





Trust value as the mean of betala, b) can be simply estimated as a/(a + b). 

Fuzzy logic has been used to manage uncertainty [Zadeh 1983] and to model trust 
in various network environments such as semantic web [Nagy et al. 2008; Lesani and 
Bagheri 2006], P2P [Chen et al. 2009], grid computing [Liao et al. 2009], mobile ad hoc 
networks [Luo et al. 2008], and e-commerce [Manchala 1998; Nefti et al. 2005]. 

Based on DST, Jøsang [1999, 2001] proposes the concept of subjective logic that de- 
scribes subjectivity of an opinion (trust) in terms of uncertainty (u), belief (b), and disbe- 
lief (d), where b + d + u = 1. Subjective logic has been considerably used for developing 
various applications by many researchers. Lioma et al. [2010] use subjective logic to 
measure uncertainty in information fusion. Manna et al. [2010] extend subjective logic 
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to extract opinions from documents. Oren et al. [2007] propose a subjective-logic-based 
argumentation framework for evidential reasoning of a sensor to maximize its utility. 

As an extension of DST, DSmT [Dezert and Smarandache 2004] has been proposed 
to deal with conflicting evidence that has not been properly handled by DST. DSmT has 
been applied in trust management for mobile ad hoc networks [Wang and Wu 2007] 
and trust-based service discovery mechanisms [Deepa and Swamynathan 2014]. 

Confidence is important to prove that an entity has sufficient experience to assess a 
particular trust dimension d [Griffiths 2006]. Griffiths [2006] proposes an interaction- 
based confidence computation in a particular trust dimension d and formulates 
it as 

Confidence? = I¢+ + IF. (10) 

A trust dimension d can be replaced with another entity j in which the entity i evaluates 
another entity j. I’* is the number of interactions with positive experience, and and 
I% is the number of interactions with negative experience. Griffiths [2006] uses the 
previous confidence calculation in order to determine to which the trust of an entity 
belongs in the continuum of trust ranging from distrust to undistrust to untrust to 
trust using his fuzzy-logic-based trust inference rule. 

Experience is used as a metric to measure trust. Griffiths [2006] also introduces 
a metric to measure experience based on whether the entity’s expectation is met or 
not, which determines positive or negative experience. Each entity i can compute its 
experience in trust dimension d as 
it — 1 


L 


(11) 





. d — 
Experience; = 


IŻ* and I* refer to the number of interactions in which entity i’s expectations were 
met and not met, respectively. This metric may reflect the expertise of an entity. For 
example, this formula can explain the level of expertise in d trust dimension an entity 
i has, such as whether or not entity į is an expert in wine. When we want to assess 
trust toward another entity, we may replace d with another entity j. Along with the 
level of confidence estimated, Griffiths [2006] uses the degree of positive or negative 
experience to infer trust of an entity in his fuzzy-logic-based trust inference rule. 

Frequency is introduced to explain validity [Daly and Haahr 2009] and estimated 
as 

f) 

FG) — fU) 

This metric is computed based on the frequency a node! in i has encountered node 
J. f(i) indicates the number of encounters between node i and node j, and F(Z) is the 
total number of encounters node i has observed. Daly and Haahr [2009] use frequency, 
closeness, intimacy, and similarity to evaluate social tie strength. Similarly, Trifunovic 
et al. [2010] use familiarity to represent trust based on the number of contacts with 
a target entity over the total number of contacts with all entities in the system. They 
called the familiarity an implicit social trust. Zhang et al. [2006] examine the key 
aspects affecting familiarity using prior experience about a similar object, repeated 
exposure, a level of processing (i.e., deep processing increases familiarity more than 
shallow processing), and forgetting rate (i.e., both immediate- and long-term delays 
decrease familiarity). 


Frequency(i, j) = (12) 


1n this work, we use the term “node” interchangeably with the term “entity” as a node is a common term 
to indicate an individual entity, either a human or a machine, in communication, information, and social 
networks. 
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Certainty is a determinant to discern whether trust is needed in a given con- 
text [Jøsang 2001; Wang and Singh 2010; Sun et al. 2006]. Blasch [1999] derives 
confidence for a target based on certainty, which can be defined against uncertainty. 
He defines confidence (C) as 


C=1-U=1+B-PL, where U=PL-B. (13) 


Here, U is uncertainty, PL is plausibility, and B is belief. 

Leveraging DST theory [Shafer 1976], Josang [2001] derives trust in an opinion 
toward proposition x in three-tuple: belief (bx), disbelief (d,.), and uncertainty (ux). He 
defines uncertainty (ux) as 


ux = 1 — by —d,. (14) 


Although certainty as 1 — uy does not mean trust, Jøsang et al. [2006] see trust as 
an expectation where uncertainty can be converted to trust to some extent based on 
prior trust toward proposition x. When an opinion w, is denoted as wx = (bx, dy, Ux, Qy), 
where a, is the base rate representing prior trust about proposition x, Jøsang et al. 
[2006] calculate the expected probability of the opinion as 


E(w) = by + axly. (15) 


Unlike Jgsang [2001], Wang and Singh [2010] define an agent’s trust based on 
“how strongly the agent believes that this probability is a specific value” regardless 
of the largeness of the value. They formulate the strength of a belief with “a prob- 
ability density function of the probability of a positive experience.” This is termed a 
Probability-Certainty Density Function (PCDF). Let p € [0, 1] be the probability that a 
positive result comes out. p is distributed as a function of f : [0, 1] —> [0, co) such that 
i. f(p)dp = 1. The probability of a positive outcome lying in [p;, p2] can be obtained 
by J > f(p)dp, where f is the uniform distribution over probabilities p. The uniform 
distribution has a certainty of 0, meaning complete uncertainty. Assuming that trust 
of an agent is correlated with the degree it deviates from uniform distribution (i.e., 
additional knowledge is acquired), the mean absolute deviation (MAD) is computed to 
derive the certainty obtained in the interval [0, 1] by [Wang and Singh 2010] 


_ fo lf(p) = lldp 


Since the mean value of a PCDF is 1, as more knowledge is learned, the probability 
mass changes such that if f(p) increases above 1 for some values of p, this will show 
below 1 for other values of p. Both an increase and a reduction from 1 are obtained 
by | f(p) — 1|, and 5 is used to remove the double counting. More details are provided 
given positive and negative evidence in Wang and Singh [2010]. 

Treating trust as the opposite of uncertainty, Sun et al. [2006] estimate trust based on 
Shannon’s entropy [1948]. Where A is a subject, i is an agent, and g is an action, T(A: 
i, ọ) is the trust A has oni who will perform action y. P(A: i, g) is the probability that 
agent i will perform ọ based on subject A’s perspective. H(p) indicates the uncertainty 
based on the entropy, and the uncertainty-based trust is given by 


_. \_ fl-H@p)if05<p<1 
PA: oO=| Hoy toe obs 


(16) 


H(p) = —plog,(p) — (1 — p) logə(1 — p) where p = P(A: i, 9). (17) 


When p = 1/2, uncertainty is the maximum with T = 0. 
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Blasch et al. [2013, 2014] propose the Uncertainty Representation and Reasoning 
Evaluation Framework (URREF) by defining information trust based on reliability 
and credibility in order to represent measures of uncertainty. This framework is a 
comprehensive ontology, aligned with standards such as the NATO Standardization 
Agreement (STANAG) 2511. We discuss reliability and credibility in detail next. 

Reliability indicates trust in a source of information in that the source exhibits 
consistent behavior [Blasch et al. 2013]. In measuring reliability of a machine, based on 
the assumption that a failure rate arrives based on exponential distribution, reliability 
of a system has been commonly measured as [Blasch et al. 2013] 


Rt) = f he **dx = e™, (18) 
t 


where à is a failure rate with the exponential interarrival time and t is time. Thus, 
reliability decreases over time and in proportion to increase of the failure rate. The 
concept of reliability has been extensively used in measuring the reliability of a serial 
system based on the product of each component as [Mahoney et al. 2005] 


Rseries(t) = Hi Rit) = e™ where Àseries = > Ài. (19) 


l 


Although the reliability metric can be defined in software or hardware, reliability refers 
to competence of an entity in other network domains such as reliability in a human 
entity. 

Availability indicates the system uptime. This is different from system reliability, 
although these two metrics are used as the same with no repair (recovery) mecha- 
nism [Heddaya and Helal 1996]. Availability of a system at time ¢ with the repair 
mechanism is measured by 


At) = R€) + (1 — RÆ — RG — T,)). (20) 


T, is the mean time to system repair (MTTR) representing the time taken to repair the 
system so the system can be up again. R(t) is reliability that captures the mean time 
to failure (MTTF) over the system time (i.e., uptime plus downtime). 

Dependability has been used to indicate either reliability or availability in system 
performance analysis. However, there exist the cases where the two metrics do not 
overlap. For example, the system is up but cannot provide services properly because 
it is not ready for service provision. This means that the system is available but not 
reliable. On the other hand, the system provides reliable service during a certain period 
of time but is frequently interrupted by downtime. This is the case where the system 
is reliable but not available. In analogy with a human entity in social networks, if a 
person is reliable but not available or vice versa, the person cannot be used to perform 
a task. Heddaya and Helal [1996] combine these two metrics to devise a dependability 
metric as 


DE) = ROAGE). (21) 


The dependability metric measures that the system meets both conditions of the two 
metrics. 

Competence is one of the key factors in the concept of trust. Marsh [1994] shows 
three states of knowledge about the competence of a trustee: (1) when the trustee is 
not known in any situations, (2) when the trustee is known in other situations but not 
this situation, and (3) when the trustee is known and trusted. 

The first state represents when no information exists about the trustee. In this case, 
the only perceived measure to use is the disposition of a trustor and importance of the 
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situation. When a task to be performed is highly important, the trustor is more likely 
to expect higher trust in the trustee, or vice versa. The perceived competence of trustee 
J that trustor i has can be formalized by 


Perceived_Competence(i, j) = T (i, j)M(, œ), (22) 


where 7 is the basic trust of trustor i in any trustees and M(i, a) is the importance of 
situation « to trustor i. 

The second state explains when trustor i does not know how the trustee j performs 
in a certain situation but knows about trustee j in other past situations. Thus, trustor i 
cannot use his or her past experience with trustee j in other situations. The competence 
that trustor i perceives in trustee j in situation a can be estimated by 


Perceived_Competence(i, j, a) = 2 > Experienced_Competence(i, j, B)' T (i, j). 
|B] peB,ag¢B 
(23) 

Here, B refers to the set of situations Bs except situation a. Experienced_ 
Competence(i, j, 6)’ is the competence that trustor i has experienced with trustee J 
in other £ situations in the past (time ¢’ < t, where t is a current time). T (i, j) is the 
general trust of trustor i in trust j. 

The third state explains when trustee j is known and trusted since trustor i has 
interacted with trustee j in identical or similar situations «œ. The competence that 
trustor i perceives in trustee j in all situations as can be given by 


2 Experienced-Competence(i, j, œ)". (24) 
acA 


Perceived_Competence(i, j, a) = a 
Ais the set of all similar or identical situations as. 

Honesty (or integrity) is measured as one of the trust dimensions and used as the 
criterion to provide an incentive when nodes behave in the system, complying with the 
system protocol [Minhas et al. 2010]. Chen et al. [2010] use honesty as a component of 
overall trust indicating the maliciousness (e.g., packet dropping or lying) of an entity. 
Similarly with the computation of “experience” earlier, honesty is computed based 
on the frequency of correct operations, such as the number of packet forwarding or 
reporting truthful information over the total number of events that occurred related to 
the honesty factor [Chen et al. 2010]. 

Recency is used to estimate the freshness of trust relationships. Daly and Haahr 
[2009] use the recency metric that refers to the time duration between when nodei met 
node j and node i has been in the network, denoted as rec(j), over the total duration 
node i has been in the network, denoted as L(i). This implies how long node i has not 
seen node j after it met node j last time. The recency is computed by Daly and Haahr 
[2009] as 


rec(j) 
L(i) — rec(j)’ 
Keung and Griffiths [2008] compute recency as trust decays over a fewer number 


of recent interactions between two entities. Similarly, Huynh et al. [2006] estimate a 
recency function to rate trust evidence as 


Recency(i, j) = (25) 


Recency(t,, t) = ea, (26) 


t is the current time and t+ is the time when evidence k is recorded. The parameter å is 
to rate recency to scale time values. Wen et al. [2010] also introduce a longevity factor 
to weigh past information and current information. 
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Stability has been used to represent one aspect of trust systems. Kittur et al. [2008] 
examine the stability of Wikipedia to evaluate its trustworthiness in terms of how much 
an article has been changed since the last viewing. Zhang et al. [2006] use the stability 
metric to measure trust of the system based on the trustworthiness rankings of sellers. 
Adomavicius and Zhang [2010] use the stability metric to measure the performance 
of recommendation systems based on the difference between performance predictions. 
Peng et al. [2008] consider stability based on the changes made between two time 
points by 


Stability; (1, t) = ANCR; (tk—1, t) + (1 — A) Pi (q-1, t). (27) 


NCR;(t;,—1, t) is the neighbor change ratio and P;(t}—1, t) is the self-status (e.g., residual 
power) change ratio occurring during t — &_1. à is a parameter to weigh the neighboring 
status, while (1 — à) is a parameter to weigh the self-status. 

Credibility is believability in information content including veracity, objectivity, 
observational sensitivity, and self-confidence [Blasch et al. 2013]. Credibility in infor- 
mation is measured based on the level of uncertainty, which is observed with conflicting, 
incomplete, and/or lacking evidence. Various belief models [Shafer 1976; Dezert and 
Smarandache 2004; Zadeh 1983; Jésang 2001] have been used to estimate certainty 
in information. In addition, social media data (e.g., Twitter, Facebook) have been pop- 
ularly used to study information credibility based on other statistical methods such 
as maximum likelihood and feature-based methods [Castillo et al. 2011; Sikdar et al. 
2014]. 

Completeness means whether the provided information is sufficient to provide an- 
swer(s) for the question ofinterest [Blasch et al. 2013]. Dutta-Bergman [2004] examines 
the effect of information completeness as one of the key factors that affect information 
credibility in medical advice websites. Ballou and Pazer [2003] study the tradeoff be- 
tween data completeness and data consistency, where data completeness is defined as 
the “presence of all defined content at both data element and data set levels.” They 
measure the overall completeness of data (CP) as 


N 
CP = Ý ` wicpi, (28) 
i=l 
where there exists N categories to meet data completeness and w; is a weight to 
consider cp;. 
Relevance of information is used to assess trust based on four components: recency, 
amount of interactions, confidence of a trustor in a source of information (recommen- 


dation), and influence of a recommendation [Keung and Griffiths 2008]. It is measured 
by 


Relevance; = f (Rec;', Ij, Cz), IFR). (29) 


Recj’ is the recency of the recommendation by entity k on task m, Ij”, indicates 
the amount of interactions between entities k and j on task m, C7’; is the degree of 
confidence that entity k has in entity j on task m, and IF}; is the relative degree of 
influence of the recommendation provided by entity k about entity j on task m. 

Velloso et al. [2010] use maturity to assess qualifications of reeommenders for trust 
evaluation. They pick relevant neighboring nodes to collect recommendations based on 
how long a neighboring node has relationships with a target node to assess its trustwor- 
thiness. Lana and Westphall [2008] also compute maturity to assess trustworthiness 
of an entity in grid computing based on history of resource utilization, seniority (grid 
membership time), frequency of resource usage, user evaluation by the administrator, 
and the initial trust level a user has in the grid. 
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Cooperation is discussed as a threshold to determine whether an entity is cooper- 
ative or not. Marsh and Briggs [2009] define the cooperation threshold as 


ee) x M(i, a). (30) 
Competence(i, j, a) + T (i, j) 


ppi perationg;. j, a) — 





Competence(i, j, «) refers to the cooperation threshold that i has toward j in situation 
a. This threshold is proportionally affected by the risk entity i perceives as well as 
adversely affected by the competence entity i perceives toward entity j when trusting 


j in situation a. Further, the previous high trust between i and j, T (i, j), may relax 
this threshold, while the importance of situation a to i will raise the threshold to 
determine cooperation with j. This formula is backed up by recent existing work that 
uses the concept of “social selfishness” in routing by nodes in sensor or mobile ad hoc 
networks [Li et al. 2010; Trifunovic et al. 2010]. That is, a node may forward a packet 
received from another node that has had past interaction with itself, called social tie [Li 
et al. 2010] or friendship [Trifunovic et al. 2010]. 

The cooperative behaviors can be derived differently depending on which network 
layer is considered. For example, in communication networks, packet dropping or for- 
warding behavior is used to estimate cooperative behavior of a node. In information 
networks, whether sharing information or not would reflect an aspect of cooperative 
behaviors. In social networks, prompt and/or frequent email replies can be regarded as 
cooperative behavior. Further, a cognitive entity with unique cognitive characteristics 
will be affected by its own disposition or propensity (e.g., tolerance or acceptance level) 
to determine its cooperative behavior. This factor may be considered in estimating 


T (i, j) as earlier. 

Rationality is extensively studied in the area of game-theoretic approaches and 
multiagent systems (MASs) where an agent is viewed as a self-interested entity to 
maximize its own interest (or utility). Doyle [1997] defines “rational decision making” 
as “choosing among alternatives in a way that properly accords with the preferences 
and beliefs of an individual decision maker or those of a group making a joint decision.” 

Market-based or game-theoretic approaches have been applied in trust systems or 
trust management schemes to enforce an agent to exhibit rational behavior by utilizing 
reward or penalty [Chin 2009; Lin and Huai 2009; Liang and Shi 2010; Wu et al. 2010]. 
Based on rational trust, the trustor can derive its decision (D) that maximizes its utility 
U(a), where a is a chosen alternative, computed by 


D = maxz[U (a1), .. . , U(q)...U(a;)I. (31) 


Even if decision makers intend to make rational decisions, they often fail due to their 
inherent cognitive limitations and/or time constraints [Jones 1999]. This is called 
“bounded rationality” wherein in market-based systems it is mostly assumed that 
only local information is considered for decision making [Huang and Nicol 2009]. 


4.1.2. Emotional Trust. 


Expectation is defined as epistemic representations about the future, which is more 
than just prediction [Castelfranchi and Falcone 2010]. Expectation is a preprocess to 
formulate prediction. Given that entity i has belief at time t, B, entity i has an 


expectation p at time t that it will be true at time t2 with the goal, Gael. to predict 
whether or not p is true for [f1, t3], where t < t2 < ts: 


Expectation? = B” (p°, True) a G!***\(p®, True/False). (32) 


Beliefs have strength in terms of a degree of subjective certainty. Goals have a level 
of subjective importance for the agent. In sociocognitive models of trust, anxiety tends 
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to be greater when the goal has high importance under high uncertainty. On the 
other hand, when the goal is not very critical under high certainty, anxiety is low 
[Castelfranchi and Falcone 2010]. Expectations can be expressed as positive or negative 
indicating the so-called hope or fear in our daily lives, to be discussed next. 

Hope is a feeling that expresses a positive expectation when the chance is rather 
low or uncertain with the goal that expectation p happens [Castelfranchi and Falcone 
2010]. The hope of entity i can be expressed by 


Hope? = BY(p®, True)”  Gi*\(p2, True). (33) 


Fear is a feeling to expect a negative outcome under an uncertain situation where 
an important goal should be achieved and is formatted as [Castelfranchi and Falcone 
2010] 


Fear? = B” (p°, True) a Gi*|(p*, False). (34) 


When expectation p turns out to be wrong, we call the expectation “invalidated.” The 
invalidated expectation can be formalized as 


Invalid Expectation? = B” (p°, True) A B;*(p®, False), (35) 


where tı < t2 < t3. 
Frustration occurs when an expectation is invalidated [Castelfranchi and Falcone 
2010] and is formulated by 


Frustration? = G}*!(p®, True / False) ^ B*(p®, False), (36) 


where ¢, < t2 < ts. Frustration is a feeling that occurs when a positive expectation 
turns out to be wrong. 

Disappointment expresses frustration when a positive expectation, hope, is inval- 
idated [Castelfranchi and Falcone 2010] and can be expressed as 


Disappointment? = GHH p”, True) \ B” (p°, True) \ B?(p®, False), (37) 


where tı < t2. When a negative expectation turns out to be wrong, we call it relief. 
Relief happens when the prediction was wrong but the goal is achieved with sur- 
prise [Castelfranchi and Falcone 2010]. Where tı < tg, the relief can be formulated by 


Relief? = G'?\(p®, False) a B?(p®, True) \ B?(p®, False). (38) 


Disposition is discussed to explain trusting behavior in terms of three states [Marsh 
1994]: optimistic, pessimistic, and realistic. An agent estimates trust differently de- 
pending on its disposition. In distributed artificial intelligence (DAI), Marsh [1994] 
describes the spectrum of realism where pessimists are less likely to be forgiving or 
trusting in others while optimists are more likely to be forgiving or trusting in others. 
Here is the formula explaining “the trust of i (trustor) in j (trustee) in the situation a” 
that considers the disposition of an agent: 


Ti, j,a) = TG, j) UG, J, «) MG, æ), (39) 


where T (i, j) estimates how much i can trust j based on the disposition of i. U(i, j, æ) is 
the utility that i gains by trusting j at situation a, and M(i, æ) estimates the importance 
of situation a to i. T (i, j) can be different depending on the disposition of the trustor 
i. Trust can be differently assessed on three types of dispositions, realism, optimism, 
and pessimism, as 


ae | oa 
Trealism(; J) = A ` TG, Js a) (40) 
acA 
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ae. 
T pessimism(;. J) = min Ti, J, a). (42) 
ae 


Trealism(, J) explains the trust realist i can compute, where A indicates a set of sit- 
uations such as all situations, situations in which agent i is involved with agent j, 
and/or similar situations agent i experienced (e.g., met an agent similar to agent j). 


T optimism, j) and T pessimism, j) show the trust computation where agent i is an opti- 
mist or pessimist. Since a different trust will be required in a different situation, there 
are variants to compute the trust of agent i in agent j in different situations based on 
its disposition or propensity [Marsh 1994]. 

Marsh [1994] points out the memory span in which an agent can maintain an amount 
of information on past experience. Willingness to trust is related to the attitude to 
take risks. In the commercial vehicle industry, Kalnbach and Lantz [1997] study how 
optimistic attitudes and willingness to trust can affect performance of workers in task 
performance. 

Regret is regarded as a critical factor in trust. Luhmann [1979] says that “trust is 
only required if a bad outcome would make you regret your decision.” We often regret 
something that happened or something we have done in the past. Regret can be used to 
reduce a similar negative experience from happening again [Marsh and Briggs 2009]. 
In modeling regret, Marsh and Briggs [2009] concern three questions to answer: “what 
was lost (x), what is meant (1), and how it feels (u).” Trustor it’s decision to trust trustee 
J puts i to regret when i is betrayed by j. The Marsh and Briggs [2009] regret function 
is formulated as 


Regret(i, j,a) = Ui, j,a) — Ui, j,&)) o f(k, à, m), (43) 


where e denotes some operation (e.g., multiplication), i is an entity, and « is a partic- 
ular situation. U(i, j, œ) is the gain from the original estimation (i.e., could have been 
gained) of what is expected to happen and U(, j, &) is the actual gain from what really 
happened. f(k, A, n) is a personal meaningfulness function that considers the three 
factors mentioned previously. This function can be further refined depending on three 
scenarios: “I regret that you did that,” “you regret that you did that,” and “I regret that 
I did not do that.” f(k, à, u) can particularly consider the importance of trust relation- 
ship between two entities, the degree of perceived risk of the trust relationship, the 
degree of being deprived from what happened, and miscalculation of the importance of 
the trust relationship in a particular situation [Marsh and Briggs 2009]. 


4.2. Relational Trust Attributes 


Sociologists have perceived trust as an attribute of collective units, not limited to only 
an attribute of an individual entity [Luhmann 1979; Barber 1983; Lewis and Weigert 
1985]. In computing research areas, trust has been recognized to indicate the quality 
of relationships among entities in social networks or reputation systems [Zieglera and 
Golbeck2007]. Characteristics defining relationships between entities such as individ- 
uals, organizations, and/or groups have been considered to define so-called social trust. 
In this section, we discuss factors by which an entity is affected by trust relationships 
or decision making such as similarity, centrality (betweenness), and importance. 
Similarity of users in online applications is popularly computed using the Pearson 
correlation coefficient [Breese et al. 1998]. The similarity of two users is obtained by 
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comparing the ratings provided by the two users as 
Vieg ai = Tapa J rp) 
VieG ai =) Dieo pi — rg)? 


Here, œ and £ are two different users and is any user that belongs to a set G including 
all users in the system except users a and £. r(a,i) refers to the rating evaluated by a 
about user i. 

In social networks, similarity is often measured based on the neighbors both nodes 
know. Liben-Nowell and Kleinberg [2003] define similarity using the intersection of 
the two neighborhood nodes, i and j, known as 





Similarity;ating(a, B) = (44) 





Similarityneighborhood, D =N A NJ). (45) 


Daly and Haahr [2009] use the same formula to calculate similarity between two 
nodes, but the neighborhood is defined as a set of contacts held by each node. Bank and 
Cole [2008] measure similarity based on the common number of neighbors over the 
union of neighbors known by two parties. Adamic and Adar [2003] measure similarity 
of two pages, incoming and outgoing, depending on whether or not it has frequent 
features. Liben-Nowell and Kleinberg [2003] adopt Adamic and Adar’s way to compute 
similarity based on common neighbors or rare neighbors. Newman [2001] predicts 
the probability of future collaborators in scientific communities. Liben-Nowell and 
Kleinberg [2003] propose their similarity metric to predict the future collaboration 
between two individuals. 

There are abundant metrics in the literature to model centrality or influence in 
networks [Everett and Borgatti 2005; Bonacich 1987; Brandes 2001; Freeman 1979; 
Freeman et al. 1991; Goh et al. 2003; Sabidussi 1966; Hage and Harary 1995; Shimbel 
1953]. 

Centrality or betweenness centrality has been used to represent the degree of im- 
portance or influence of an entity since the 1950s. Freeman [1977, 1979] estimates 
degree centrality based on the number of direct ties associated with a given node. De- 
gree centrality of a given node p;, where a(p;, pp) = 1 if p; and p, can communicate via 
direct link, is computed by 


Centrality gasea” pi) = X alpi, Pr). (46) 
keK 


Here, k is an element of K, a set of all nodes in the system. Freeman [1977] describes 
closeness (proximity) centrality based on the reciprocal of the “mean geodesic distance.” 

Closeness centrality is defined by “a measure of how long it will take information 
to flow from a given node to other nodes in the network” [Newman 2005] and can be 
computed by 


IN|] -1 
D nen dpi, Pn) 


Here, for a given node p;, N refers to a set of nodes who can be reached in the network 
by pi. 

Newman [2005] computes betweenness centrality based on how much a node has 
control in exchanging information with others. That is, if a node is more capable of 
facilitating interactions (or communication) among nodes it is connected with, it in- 
dicates high betweenness centrality [Newman 2005]. Where g; is the number of all 
geodesic paths connecting p; and pz and g; (pi) is the number of the geodesic paths 


CentralityN°wm(p;) = (47) 
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including p; [Newman 2005], betweenness centrality is computed by 


al 
CentralityNevm” (pi) = > yo 2i w, 
jeg kek EIk 


(48) 


Freeman’s closeness centrality metric and Newman’s centrality metrics (closeness and 
betweenness) require a node to be aware of an entire network, requiring a certain level 
of global review, for example, all possible paths from node i to node j to compute the 
number of the shortest paths between them [Daly and Haahr 2009]. This drawback 
introduces an “ego network,” which refers to a network with a single actor (ego) that is 
connected with multiple actors (alters) that have links among them [Marsden 2002]. 
Marsden [2002] introduces centrality measures in ego networks compared to Freeman’s 
centrality metrics. Daly and Haahr [2009] use an intimacy or closeness centrality as a 
component of the tie strength metric. 

Importance of an entity is also examined to measure trust of the entity in a network. 
Shapley [1953] proposes a value to express the importance of each player in a coalition 
game. In this game, players cooperate and obtain a certain gain (i.e., payoff) if the 
coalition wins. Some players may contribute more than others. In that case, there 
should be a different distribution of the gains among players. The Shapley value gives 
how important each player’s contribution is to the overall cooperation and is computed 
as 


(n — = 
aja EME) gu =e) (49) 
SeN,i¢N a 


This Shapley value indicates the amount of profits player i obtains in a given coalition 
game. S is a coalition of players agreeing to cooperation. n is the total number of 
players. N is a set of players that does not include player i. S is a subset of N and v is 
a function of value of a coalition. 

v(S) indicates the value of coalition S, which means the overall gain expected from 
coalition S. v(S Ui)—v(S) gives the fair amount of player 7’s contribution to the coalition 
game. The fraction with permutations averages over the possible different permuta- 
tions where the coalition can be formed. 

Based on the constructs of trust discussed in Sections 4.1 and 4.2, we also look 
into how the various constructs of trust can fit for each layer of a complex, composite 
network embracing communication, information, and social/cognitive domains. 


4.3. Composite Trust 


This work proposes the concept of composite trust characterized by communication 
trust, information trust, social trust, and cognitive trust that can be derived from a 
complex, composite network. 

Communication Trust refers to trust deriving from the characteristics of com- 
munication networks in which the network consists of a number of nodes and links 
to connect them via cable or wireless media. Dimensions of trust in communication 
networks can be measured objectively and are closely related to the aspects of quality 
of service (QoS) such as network connectivity (e.g., k-connectedness, average shortest 
path, node density, reachability), fault tolerance (e.g., system lifetime), cooperative or 
selfish behaviors (e.g., forwarding or dropping packets), and network capacity (e.g., 
traffic or congestion) [Daly and Haahr 2009; Desmedt et al. 2007; Jøsang 1999; Lana 
and Westphall 2008; Cho et al. 2011]. 

Information Trust indicates trust in information networks that provide informa- 
tion services based on information sharing. Information trust includes multiple aspects 
related to quality of information (QolI) and credibility [Blasch et al. 2010]. Rieh and 
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Danielson [2007] point out the difference between trust and credibility. Trust is “a 
positive belief about the perceived reliability, dependability, and confidence on a per- 
son, object, or process based on the willingness to accept risk and vulnerability” [Rieh 
and Danielson 2007]. Credibility indicates “a perceived quality of a source, which may 
or may not result in associated trusting behaviors” [Rieh and Danielson 2007]. The 
dimensions of credibility or Qol include “quality, authority, reliability, validity, trust- 
worthiness, and expertise of a source, in addition to relevance, consistency, recency, 
and correctness” [Rieh and Danielson 2007]. Hilligoss and Rieh [2008] define the con- 
structs of credibility as “trustfulness, believability, trustworthiness, objectivity, relia- 
bility, trust, accuracy, and fairness.” Most researchers agree on the salient features of 
credibility as trustworthiness and expertise to ensure honesty and reliability in both 
source and information. 

Social Trust indicates trust between humans in social networks. A social network 
is a network structure consisting of individuals or organizations formed based on ties 
between them. According to Golbeck [2009], social trust is a fuzzy concept observed 
in social trust relationships between people. Social trust between two individuals is 
studied by examining interaction history; similarity in preferences, background, and 
demographics; reputation or recommendations obtained from third parties; different 
life experiences of individuals; and so forth. Recently many social trust researchers have 
used data from social networking applications to investigate the trust relationships 
between people and to examine critical factors that affect relationships. However, online 
relationships are usually different from those in real life in that people may be generous 
in maintaining relationships in online social networks (e.g., Facebook, Twitter, LinkIn, 
etc.), while those relationships may not exist offline [Golbeck 2009]. 

Cognitive Trust refers to trust derived through cognitive reasoning, where cogni- 
tion is the process of thoughts, mental functions, or mental processes as the state of 
intelligent entities [Wikipedia 2015]. Johnson and Grayson [2005] discuss cognitive 
trust in relationships between a service provider and a customer. The author describes 
that cognitive trust refers to “confidence or willingness of customers to rely on a ser- 
vice provider’s competence and reliability” [Johnson and Grayson 2005]. Usually the 
cognitive trust comes from accumulated knowledge to make predictions but with un- 
certainty for possible risk. In a complex network that has human entities involved, 
the entity’s cognitive motivations and/or competence affects their way of information 
processing and accordingly affects trust assessment toward interacting parties. 

In the area of artificial intelligence and human—machine interaction, the concept of 
cognitive trust follows as the reasoning process in mental functions. Accordingly, cog- 
nitive trust can be measured by assessing emotional and reasoning aspects of human 
thoughts such as expectation, hope, belief, frustration, disappointment, disposition, 
maturity, willingness, rationality, and regret. 

As an example of composite trust, in the human—machine research area, there have 
been efforts to define trust in automation in terms of composite characteristics of an 
entity. Muir [1994] elaborates the concept of trust based on expectation [Barber 1983] 
and experience [Rempel et al. 1985]. Muir [1994] categorizes expectation in terms of 
persistence, technical competence, and fiduciary responsibility using the dimensions 
of trust proposed by Barber [1983]. Muir [1994] defines trust of a supervisor toward a 
human or machine by combining the previous three components as 


T; = Bo + B1X1 + b2X2 + £3X3 + BaX1X2 + Ps XıX3 + Be X2X3 + b7X1X2X3. (50) 
Bo-7 are parameters, X is “persistence,” X is “technical competence,” and X; “fiduciary 


responsibility.” This formula shows that there exist dimensions of interdependency 
between the three components. 
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Fig. 5. Dimensions of trust in a composite network. 


Muir [1994] further analyzes expectation according to the different levels of experience 
in terms of predictability of an act, dependability of dispositions, and faith in motives 
proposed by Rempel et al. [1985]. Muir [1994] proposes that the three different levels 
of experience can be the basis of estimating expectation as the core concept of trust. 
Considering the six components, they define trust as 


Trust = Predictability + Dependability + Faith 
+ Competence + Responsibility + Reliability. (51) 


Reliability refers to the fiduciary responsibility based on the model by Barber [1983]. 

Figure 5 shows how the various constructs of trust discussed in this section are 
related to the different dimensions of composite trust. The concept of a composite net- 
work implies that an entity belongs to different types of networks, which may include 
communication, information, and social network, where the entity has the cognitive 
ability to make intelligent decisions. For example, we humans communicate to each 
other through various mediums of communication networks (e.g., phones, emails, social 
media) and make and maintain social relationships with other people. The relationship 
can be maintained or broken based on the perceived trust toward each other, which 
is related to the concept of cognitive trust. To ensure trust toward another entity, we 
use information that may not always be perfect or certain and so we need to derive 
credible, relevant, fresh information with uncertain, incomplete, and conflicting evi- 
dence. In this example, we recognize how an entity’s trust toward another entity can 
be interwoven based on the interplay of the characteristics of different layers of the 
complex, composite network. 
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5. PROPERTIES OF TRUST 


In this section, we discuss the following key trust properties and how they are ap- 
plied in the literature: subjectivity, dynamicity, asymmetry, transitivity, and context 
dependency. 


5.1. Subjectivity 


Subjectivity is the inherent nature of trust in which objective trust assessment may 
not be possible where evidence may be uncertain, incomplete, and conflicting in reality. 
Note that subjective trust implies estimated trust based on local, uncertain, and/or 
incomplete evidence, while objective trust refers to a ground-truth trust that uses an 
oracle with global information. Of course, estimating objective trust is not possible in re- 
ality. In particular, subjective trust is inferred through the cognitive reasoning process 
affected by the entity’s disposition [Hasan et al. 2009] and/or personal preference [Yan 
et al. 2003]. 

In the philosophical sense [Porter 1995], the objectivity of science generally means 
the ability to know things as they really are. However, in a regime of trust, subjective 
discretionary decisions can bring far more useful results than objective indiscriminate 
decisions with uncertain, incomplete evidence [Porter 1995]. 

Porter’s view on the superior aspect of decisions by subjective discretion can be sup- 
ported by Jdsang’s two types of trust [2005]: (1) reliability trust is a context-independent 
trust based on reliability perceived by an observer, which is orthogonal to given situa- 
tions and recognizes possible risk, representing objective trust; and (2) decision trust is 
a context-dependent trust that gives relative reliance in given situations despite that 
negative results may be generated. However, in some contexts, the context-dependent 
situational trust may be needed to achieve a given task even under high risk. That is, 
trust estimates based on subjective discretion can bring positive results depending on 
the situation. By the same token, Blaze et al. [2009] discuss that situational dynamism 
should be considered in trust management where even less reliable information or 
results can critically contribute to the success of a given task. 

The subjective aspect of trust has been studied by fuzzy set theory treating subjective 
trust as a belief [Zadeh 1965]. Ma et al. [2010] use “fuzzy comprehensive evaluation” 
to estimate trust using credit and reputation. Hasan et al. [2009] propose a method 
to eliminate the subjectivity of trust. Marsh [1994] uses memory span to consider the 
disposition of agents to measure subjective trust in multiagent systems. 


5.2. Dynamicity 


Dynamicity of trust is intrinsic in its nature [Castelfranchi and Falcone 1998a]. Trust 
evolves over time based on the types of experiences or the amount of interactions. 
Trust is affected by the fluctuations of a trustor’s or trustee’s emotional or rational 
status. In addition, trust is affected by different social contexts. For example, trust is 
influenced by the existence of authority/control entities, the characteristics of given 
tasks, and/or the nature of contracts (e.g., rules, regulations, or laws). Although in 
human-to-machine trust the dynamics of trust are emphasized due to the dynamic 
nature of human entities, even machine-to-machine trust may not be static because a 
node’s resource may decay or be compromised by an attacker over time. 

Trust decays over time and is updated upon the arrival of new evidence. Jøsang et al. 
[2006] suggest modeling the decay of trust when entity i assesses entity j’s trust at 
time ¢ as 


TG, j,t) =A “TG, j, t). (52) 
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Note that 0 < à < 1 and t is the time at which the rating was collected and t is the cur- 
rent time. In particular, this formula can be used when no new information or only part 
of trust at current time t is available. Dynamicity of trust has been studied by consider- 
ing trust decay over time or space [Cho et al. 2009], experiences/interactions [English 
et al. 2003; Marsh 1994], or decision making under different context or situations [Blaze 
et al. 2009]. 


5.3. Asymmetry 


Asymmetry of trust addresses how two entities do not necessarily have equal degrees 
of trust toward each other. This may be affected by asymmetric characteristics of two 
parties to establish a trust relationship. Asymmetric characteristics may include non- 
symmetrical situations between actors, power (e.g., authority), different cultures, or 
resources. In this context, asymmetry can be regarded as difference in knowledge, 
power, and culture of actors [Blomqvist and Stahle 2000]. Asymmetric trust relation- 
ships can be mitigated to some extent by the reciprocal (or reciprocation) nature of the 
dyadic relationship. That is, as A trusts B more over time, B becomes trusting of A 
more as well. This reduces the gap of asymmetry in trust between two nodes, leading 
to a symmetric trust relationship. This can be modeled by an undirected graph such 
that if A trusts B, then B trust A as well. 

Cvetkovich et al. [2002] and Slovic [1993] discuss asymmetry of trust in information. 
They claim that trust-destroying (negative) events impact more than trust-building 
(positive) events in trust judgment, emphasizing the fragility of trust. Kramer [1999] 
examines asymmetries of trust behaviors depending on individuals’ positions within 
a hierarchical relationship. The asymmetry characteristic of trust is applied in net- 
working research to develop secure networking protocols [Dinda 2004; Desmedt et al. 
2007]. 


5.4. Incomplete Transitivity 


Incomplete transitivity of trust is observed in reality, although perfect trust transitivity 
is addressed in cryptography such as PGP (Pretty Good Privacy) using the concept of 
the web of trust. In the web of trust, if there is a trust chain from A to B and from B 
to C, then A also trusts C as much as B trusts C [Stallings 1995]. Luhmann [1979] 
insists on nontransitivity of trust in that “Trust is not transferable to other objects or 
to other people who trust.” In particular, this case occurs when two entities have totally 
different knowledge bases, so they may have conflicting opinions toward a same entity 
or object. As a conservative perspective, most trust researchers reach a consensus in 
that trust is not completely transitive or transferable to another entity particularly 
when humans are in the loop of a system. 

Jgsang [2003, 2005] discusses that under certain semantic constraints, trust can be 
partially transitive. He discusses referral trust and functional trust, where the former 
is the ability to refer to a third party, while the latter is the ability to reeommend the 
third party based on a direct relationship. Alice can refer to Bob’s recommendation 
about another referral person, Claire, who has direct experience with a car mechanic, 
David. Alice has a referral trust in Bob, Bob has a referral trust in Claire, and Claire 
has a functional trust in David. Trust is not completely transitive based on human 
perceptions and is diluted through transitivity. In this example scenario, we can say 
that Alice can trust David as much as Claire trusts David at most. 

Marsh [1994] backs up the incomplete transitivity of trust. For rational entity x, the 
following may hold as 


T(x,y)>T(x,z) A Tlx,z) > T(x, w)=> T(x, y) > T(x, w). (53) 
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Table V. Trust Properties in the Process of Trust Assessment in Figure 1 


























Trust Property Phase in Trust Assessment 

Subjectivity Individual (emotional and logical) and relational trust assessment 

Dynamicity Uncertainty and ambiguity analysis due to dynamics in risk 
assessment 

Asymmetry Vulnerability and impact analysis in risk assessment 

Incomplete Transitivity Enhancing situation awareness by propagating proven trust evidence 
(i.e., feedback based on trustworthiness) through a trust chain 

Context Dependency Vulnerability, impact, and utility analysis in risk assessment 








The notation T(x, y) represents trust of x in y. However, trust is not transitive in any 
relation as 


T(x,y)>Tly,w) Æ T(x, y) > T(x, w). (54) 


Marsh [1994] describes that “x trusts y by some amount and y trusts w by some other 
amount does not say about how much x trusts w.” Dondio et al. [2008] propose a 
compatibility scheme of trust between systems with different trust schemes. They use 
the degree of compatibility to weigh exchanged trust judgment based on the incomplete 
transitivity of trust. 

Although trust cannot be completely transitive, trust can be easily transferred from 
one context (personal friendships) to another context (business relationships) [Bradach 
and Eccles 1989]. The idea of trust transferability has been adopted in many business 
settings [Lewicki and Bunker 1995; Lin and Lu 2010]. 


5.5. Context Dependency 


Context dependency of trust helps derive critical factors to estimate trust in a given 
context. For example, Bob is a good physician, but he may not be a good car me- 
chanic [Jgsang and Pope 2005]. Investigating the given context helps derive trust to 
achieve the goal of trust assessment. In addition, as discussed in Section 5, given a 
situation, reliability trust is a context-independent, objective trust, while decision trust 
is a context-dependent, subjective trust [Josang and Pope 2005]. But oftentimes we 
choose a context-dependent decision trust because whether to trust or not affects the 
outcome of goal achievement. 

The context dependency of trust has been modeled in various domains including 
trust and reputation systems [Malacka et al. 2010], pervasive collaborative environ- 
ments [Corradi et al. 2005], and organizational management [Mayer et al. 1995]. 


5.6. Trust Properties in Trust Assessment 


In Figure 1 of Section 2.2, we described the process of trust assessment in detail. We 
associate each phase of trust assessment described in Figure 1 with each property of 
trust discussed in this section. Key dimensions of trust in individual and relational 
levels are estimated subjectively. The dynamics of relationships or a system generate 
uncertain, incomplete, or conflicting evidence, which should be considered to estimate 
the level of uncertainty and ambiguity. Since two entities trust each other to differ- 
ent degrees, there exists potential betrayal exposing potential vulnerability, and this 
may result in a huge negative impact upon a trustee’s betrayal. Trustworthy, proven 
evidence is fed back or propagated to other entities through a trust chain, leading to 
enhanced situation awareness by individual entities in a given system. Deciding on 
whether or not to trust is closely related to vulnerability, impact, and utility in a given 
context. Therefore, all five trust properties, at least, should be preserved in the process 
of trust assessment, in particular applications involving humans in the loop. 
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6. APPLICATIONS, CHALLENGES, AND SUGGESTIONS 
6.1. Trust-Based Applications 


Trust has been applied to help enhance the decision-making process in various domains. 
This section discusses how trust has been employed in the computing and engineering 
fields. 

The Artificial Intelligence (AI) research community has been active in conducting 
trust research through agent modeling. Since agents are assumed to be intelligent, ra- 
tional, cooperative, and independent [Marsh 1994], trust is considered as a key factor 
that impacts interactions between agents in distributed multiagent systems (DMASs). 
In DMASs, trust has been used in various applications such as service composition 
in web services [Hang and Singh 2010], air traffic control [Cammarata et al. 1988], 
open information systems [Hewitt 1991], trust/reputation systems [Huynh et al. 2006], 
reputation and social network analysis [Sabater and Sierra 2002], and task schedul- 
ing [Rabeloa et al. 1999]. 

Human-Computer Interaction (HCD has investigated trust to create trustwor- 
thy websites or web services that can attract more users. Zheng et al. [2011] survey key 
factors that impact trust in human beings and computers in online contexts in terms of 
computer user interface (CUD), notification and visualization for trust-associated infor- 
mation, and trust management to maintain computer systems and communications. 
Trust cues are measured based on the features of interface and structure design (to 
improve “the look and feel” of a CUD), content design (to preserve security and privacy), 
and social cue design (e.g., indicators of social presence such as photographs) [Jensen 
et al. 2005; Wang and Emurian 2005]. Trustworthiness of information content by pro- 
viding relevant and useful content to target populations is a strong trust cue [Shelat 
and Egger 2002]. In addition, quality of services and information provided by the com- 
puter affects users’ trust and satisfaction [Lee and Chung 2009]. 

Data Fusion is another active research area that uses trust to enhance decision 
making based on various fusion techniques. Data fusion is the process that combines 
multiple records into a single, consistent, complete, and concise form in the presence 
of uncertain, incomplete, and conflicting evidence [Bleiholder and Naumann 2008]. 
Many works on data (or information) fusion have been proposed to deal with fus- 
ing multiple reports generated by sensors based on trust with the goal of making 
correct decisions [Yang et al. 2010; Nevell et al. 2010; Blasch et al. 2013]. Various 
theories are adopted to implement information fusion based on trust such as Kalman 
filtering [Matei et al. 2009], DST to minimize uncertainty in combining sensor in- 
formation [Pong and Challa 2007], TBM to fuse soft information from human ob- 
servers [Stampouli et al. 2010], and subjective logic to interpret and fuse information 
from multiple sources in different situations [Josang and Hankin 2012]. 

The Human-Machine Fusion research area combines HCI and Data Fusion 
noted earlier. Blasch and Plano [2002] propose the Level 5 Fusion Model considering a 
human’s role in the fusion process in terms of monitoring and controlling. The proposed 
model divides sensor management into two processes, which consist of processes by 
both machines and humans. They show the data-feature-decision (DFD) model 
[Bedworth and Obrien 2000] for the machine fusion parts and the Joint Director’s of 
Labs (JDL) model [Steinberg et al. 1999] for the human-computer interfaces. 

Networking & Network Security researchers have explored the development of 
trust and reputation management with the goals of achieving high performance and se- 
curity. The notion of trust has been used to estimate an entity’s selfishness or capability 
for the purpose of efficient and effective resource allocation such as sensor allocation 
in multiagent systems [Shen et al. 2011], service composition and binding [Wang et al. 
2013], and task assignment [Cho et al. 2013]. In addition, trust has been used as a soft 
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approach to achieve security, such as identifying malicious or selfish entities in net- 
works. Various security applications using trust, including intrusion detection, secure 
routing, key management, and access control, have been studied extensively in the 
literature [Cho et al. 2011]. Kamvar et al. [2003] propose the EigenTrust reputation 
algorithm for peer-to-peer (P2P) networks to prevent fake trust value manipulation by 
malicious nodes. Shaikh et al. [2009] propose a trust model that assesses the trustwor- 
thiness of sensor groups in large-scale sensor networks in the presence of malicious, 
selfish, and faulty nodes. Baras and Jiang 2004] model a wireless network as an undi- 
rected graph based on graph theory [Diestel 2010]. Bayesian trust models are used to 
measure trust in pervasive computing [Quercia et al. 2006] and P2P networks [Wang 
and Vassileva 2003] to deal with malicious entities. 

Data Mining techniques have been used for trust assessment in many applica- 
tions, particularly to analyze big data such as privacy preserving based on multilevel 
trust [Li et al. 2012]; identifying trust, distrust, and/or privacy factors in online social 
networks [Fong et al. 2012; Bachi et al. 2012]; analyzing trust relationships in big 
data from social network applications (e.g., Facebook, Twitter) [Fong and Chen 2010; 
Szomszor et al. 2011]; and assessing trust based on a statistical method called logit 
regression to capture behavioral patterns of entities [Wang et al. 2014]. 

The Automation research community has inspired trust research in many other 
computing and engineering research areas since the 1990s [Lee and Moray 1992; Mayer 
et al. 1995]. Muir and Moray [1996] investigate the effect of operators’ subjective trust 
and the use of the automation in a simulated supervisory process control task. Blasch 
and Plano [2002] also present a fusion system to support a human using the notion 
of trust. Moray et al. [2000] study the effect of automation reliability on an operator’s 
subjective trust. Fan et al. [2008] conduct experiments to uncover the nature of human 
trust in human—agent collaboration in order to improve decisions in automation usage. 
The studies on humans’ trust in automation have been extensively applied in modeling 
trust in other areas such as multiagent systems where an agent can be either a machine 
or a human [Castelfranchi and Falcone 1998a]. Parasuraman et al. [2008] look into how 
much situation awareness (SA), mental workload, and trust in automation can promote 
the human-system performance in complex systems. 

Based on various components of trust addressed in Section 4, we suggest that var- 
ious components should be primarily investigated in each domain of applications in 
Table VI. 


6.2. Challenges and Suggestions 


We have discussed a variety of applications using the concept of trust in diverse do- 
mains. Although the challenges of trust research may be unique depending on a domain, 
this section identifies and discusses the common design challenges and corresponding 
suggestions in developing trust models as follows: 


—Identification of key trust dimensions. In any context, trust can be the basis 
for decision making closely related to achieving a system/application goal. Since 
dimensions of trust are numerous, it is not trivial to select key components of trust 
to maximize decision performance. Reflecting the notion of context dependency in 
the nature of trust, trust system designers should investigate the requirements of 
entities and/or information that can be directly related to achieving given goals of 
systems. 

—Optimal balance of multiple objectives based on situational trust. As seen in 
Section 2, trust assessment is affected by many different factors particularly related 
to utility and risk analysis under the dynamics of a situation. Although trust can 
be estimated based on objective criteria, regardless of the level of objective trust, a 
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Table VI. Key Trust Components of Each Application Domain in a Composite Network 
Communication 
Trust Information Trust Social Trust Cognitive Trust 
Artificial cooperation, belief, experience, | importance, expectation, 
Intelligence availability uncertainty honesty confidence, hope, 
fear, frustration, 
disappointment, 
relief, regret 
Human-Computer | reliability, belief, experience, | importance, expectation, 
Interaction availability uncertainty integrity frustration, regret, 
experience, hope, 
fear 
Data Fusion availability credibility, source’s influence | disposition 
relevance, and integrity (optimistic, 
completeness, pessimistic) 
recency 
Human—Machine competence, credibility, source’s influence | disposition 
Fusion reliability, relevance, and integrity 
availability completeness, 
recency 
Networking & reliability, integrity honesty, centrality | experience 
Network Security | availability (learning) 
Data Mining availability relevance, similarity, belief 
credibility, importance 
completeness 
Automation reliability, belief, experience integrity, expectation, 
availability importance confidence 




















binary decision should often be made to take actions under deprived conditions such 
as lack of resources and/or high uncertainty. That is, situational trust may be critical 
depending on context and balance key tradeoffs between conflicting goals in order to 
maximize the decision effectiveness and/or task performance. 

—Adaptability to dynamic environments in estimating trust. The dynamics of 
a situation and/or network environments significantly affect trust estimation. A net- 
work may have different operational status due to mobility/failure, hostility, resource 
constraints, task characteristics (e.g., services, operations, interactions), and/or no 
trusted infrastructure. An entity should be adaptable to changing operational and/or 
node conditions for accurate trust estimation, which can be the basis for critical 
decision making. 

—Verification and validation of trust models. Trust model verification and vali- 
dation has been a grand challenge because of the inherent subjective nature of trust. 
Even in a social computing area, researchers insist that there is no objective social 
trust [Golbeck 2009]. However, in order to prove the benefit of trust models, one 
may want to develop a performance metric that can demonstrate the application 
performance optimization in proposed trust models. 

—Maximization of situation awareness to increase the accuracy of trust 
estimation. Endsley [1996] defines SA as perceiving environmental factors in time 
and space, analyzing the meaning of the factors, and predicting their status in the 
near future. This implies the three levels of SA in terms of perceiving critical situa- 
tional factors, interpreting them, and predicting future status for effective decision 
making. Since trust is often inferred based on the analysis of situational factors, 
trust system designers need to aim to achieve high SA, which is a critical factor in 
accurately estimating trust to promote effective decision making. 
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7. CONCLUDING REMARKS 


In this work, we comprehensively surveyed multidisciplinary definitions of trust, trust- 
related concepts, trust representations, trust properties, and formulations of trust 
constructs. In addition, we discussed how to measure trust attributes from complex, 
composite networks consisting of communication, information, social, and cognitive 
domains. We addressed how trust research has been explored for various purposes in 
diverse research domains. 

As in this modern society a network becomes more and more complex and interwoven 
between multiple factors, accordingly deriving trust in the network becomes highly 
complex. We introduced the concept of composite trust deriving from the interplay of 
unique characteristics of different layers of a complex network. 

For proper quantification of trust in a complex, composite network, the identification 
of key trust dimensions in a given context or task scenario is the first step. The second 
step is to tackle how to formalize trust and validate trust metrics or models. Following 
these two steps, we can then accurately make trust assessments that can be the basis 
of effective decision making through maximizing situation awareness that provides 
accurate perception, interpretation, and prediction of critical situational factors for 
future decision making. 
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